Known vulnerabilities in ruby1.9.3 (Ubuntu package) 1.9.3.484-2ubuntu1.11

Vendor: Canonical Ltd.
Software: ruby1.9.3 (Ubuntu package)
Version: 1.9.3.484-2ubuntu1.11
Software CPE: cpe:2.3:o:canonical:ruby1.9.3:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 17
Public exploits: 1
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ruby1.9.3 (Ubuntu package) version 1.9.3.484-2ubuntu1.11 ruby1.9.3 (Ubuntu package) 1.9.3.484-2ubuntu1.11 is affected by 17 vulnerabilities: 2 high, 2 medium, 13 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8321		 CWE-79 Low
No
No
 1.9.3.484-2ubuntu1.14 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 10 more
#VU20193 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-8320		 CWE-22 Low
No
No
 1.9.3.484-2ubuntu1.14 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 9 more
#VU20192 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8323		 CWE-79 Low
No
No
 1.9.3.484-2ubuntu1.14 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 11 more
#VU20191 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8322		 CWE-79 Low
No
No
 1.9.3.484-2ubuntu1.14 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 11 more
#VU20190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8325		 CWE-79 Low
No
No
 1.9.3.484-2ubuntu1.14 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 11 more
#VU20189 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-8324		 CWE-94 Medium
No
No
 1.9.3.484-2ubuntu1.14 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 12 more
#VU15725 - Improper input validation
CVE-2018-16396		 CWE-20 Low
No
No
 1.9.3.484-2ubuntu1.13 06.11.2018 SB2018110603
SB2018112909
SB2018112910
and 14 more
#VU15724 - Improper input validation
CVE-2018-16395		 CWE-20 Low
No
No
 1.9.3.484-2ubuntu1.13 06.11.2018 SB2018110603
SB2018112909
SB2018112910
and 16 more
#VU11650 - Deserialization of Untrusted Data
CVE-2018-1000074		 CWE-502 High
No
No
 1.9.3.484-2ubuntu1.8, 1.9.3.484-2ubuntu1.12 10.04.2018 SB2018040507
SB2018061002
SB2018080117
and 15 more
#VU11539 - Resource exhaustion
CVE-2018-8777		 CWE-400 Low
No
No
 1.9.3.484-2ubuntu1.12 05.04.2018 SB2018033009
SB2018080117
SB2018103106
and 17 more
#VU11537 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2017-17742		 CWE-113 Low
No
No
 1.9.3.484-2ubuntu1.12 05.04.2018 SB2018033009
SB2018080117
SB2018103106
and 18 more
#VU8815 - Deserialization of Untrusted Data
CVE-2017-0903		 CWE-502 High
No
No
 1.9.3.484-2ubuntu1.12 13.10.2017 SB2017101301
SB2017111201
SB2017121902
and 11 more
#VU8448 - Exposure of sensitive information to an unauthorized actor
CVE-2017-10784		 CWE-200 Low
No
No
 1.9.3.484-2ubuntu1.12 15.09.2017 SB2017091505
SB2017100602
SB2017091810
and 18 more
#VU8447 - Improper input validation
CVE-2017-0898		 CWE-20 Low
No
No
 1.9.3.484-2ubuntu1.12 15.09.2017 SB2017091505
SB2017100602
SB2017091810
and 17 more
#VU8123 - Exposure of sensitive information to an unauthorized actor
CVE-2017-14064		 CWE-200 Low
No
No
 1.9.3.484-2ubuntu1.12 06.09.2017 SB2017090606
SB2017091505
SB2017100602
and 17 more
#VU8058 - Improper Access Control
CVE-2017-0902		 CWE-284 Low
No
No
 1.9.3.484-2ubuntu1.12 31.08.2017 SB2017083105
SB2017090606
SB2017090607
and 18 more
#VU8057 - Improper input validation
CVE-2017-0901		 CWE-20 Medium
Public exploit available
No
 1.9.3.484-2ubuntu1.12 31.08.2017 SB2017083105
SB2017090606
SB2017090607
and 19 more